Bug 570990 – <dev-python/rsa-3.2.3-r1: signature forgery (CVE-2016-1494)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2016-01-05 14:38:25 UTC]

From ${URL} :

please assign a CVE to this signature forgery vulnerability in
python-rsa. It allows an attacker to fake signatures for arbitrary
messages for any key with low exponent "e" (like the common 3).

Writeup:
https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/
Fix:
https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff
Project: https://pypi.python.org/pypi/rsa



@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

[Comment 1 Justin Lecher (RETIRED) 2016-01-06 11:26:18 UTC]

We wait until upstream merges the patch.

[Comment 2 Justin Lecher (RETIRED) 2016-01-07 08:57:01 UTC]

commit 180d405a41b277428974932c8b439048fe05ac36
Author: Justin Lecher <[e-mail]>
Date:   Thu Jan 7 09:56:09 2016 +0100

    dev-python/rsa: Backport patch for CVS-2016-1494

    Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=570990

    Package-Manager: portage-2.2.26
    Signed-off-by: Justin Lecher <[e-mail]>

    https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=180d405a41b277428974932c8b439048fe05ac36

[Comment 3 Justin Lecher (RETIRED) 2016-01-07 08:57:31 UTC]

@arches, please stabilize

=dev-python/rsa-3.2.3-r1

[Comment 4 Agostino Sarubbo 2016-01-11 10:56:51 UTC]

amd64 stable

[Comment 5 Justin Lecher (RETIRED) 2016-01-13 13:47:41 UTC]

@arches, please stabilize

=dev-python/rsa-3.2.3-r1
=dev-python/oauth2client-1.5.2

[Comment 6 Justin Lecher (RETIRED) 2016-01-14 11:22:01 UTC]

@arches, please stabilize

=dev-python/rsa-3.2.3-r1
=dev-python/oauth2client-1.5.2
=dev-python/httplib2-0.9.1

[Comment 7 Agostino Sarubbo 2016-01-14 11:56:24 UTC]

amd64 stable

[Comment 8 Andreas Schürch 2016-01-20 15:27:25 UTC]

x86 done

[Comment 9 SpanKY 2016-02-16 20:42:21 UTC]

arm stable

[Comment 10 GLSAMaker/CVETool Bot 2016-06-21 09:41:27 UTC]

CVE-2016-1494 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1494):
  The verify function in the RSA package for Python (Python-RSA) before 3.3
  allows attackers to spoof signatures with a small public exponent via
  crafted signature padding, aka a BERserk attack.

[Comment 11 Aaron Bauman (RETIRED) 2016-06-21 09:45:09 UTC]

@maintainer(s), please clean the vulnerable versions from the tree.

GLSA Vote: Yes.

New GLSA request submitted.

[Comment 12 Aaron Bauman (RETIRED) 2016-11-20 06:03:34 UTC]

please clean vulnerable versions.

[Comment 13 Patrice Clement 2016-11-26 21:44:38 UTC]

commit 5b270563043845c98a12974a16abfb92f555ebd2 (HEAD -> master, origin/master, origin/HEAD)
Author:     Patrice Clement <[e-mail]>
AuthorDate: Sat Nov 26 22:43:51 2016 +0100
Commit:     Patrice Clement <[e-mail]>
CommitDate: Sat Nov 26 22:44:09 2016 +0100

dev-python/rsa: Clean up vulnerable versions.

Gentoo-Bug: https://bugs.gentoo.org/570990

Package-Manager: portage-2.3.0

dev-python/rsa/Manifest            |  2 --
dev-python/rsa/rsa-3.1.4-r1.ebuild | 33 ---------------------------------
dev-python/rsa/rsa-3.2.3.ebuild    | 34 ----------------------------------
dev-python/rsa/rsa-3.2.ebuild      | 34 ----------------------------------
4 files changed, 103 deletions(-)
delete mode 100644 dev-python/rsa/rsa-3.1.4-r1.ebuild
delete mode 100644 dev-python/rsa/rsa-3.2.3.ebuild
delete mode 100644 dev-python/rsa/rsa-3.2.ebuild

[Comment 14 Patrice Clement 2016-11-26 21:45:35 UTC]

Security, please do the deed. Thanks.